RVS 3.19 Launched
Rapita is proud to be an ISOLDE Partner
Rapita and SYSGO underline partnership
RVS 3.18 Launched
Measuring response times and more with RapiTime
Why mitigating interference alone isn’t enough to verify timing performance for multicore DO-178C projects
There are how many sources of interference in a multicore system?
Supporting modern development methodologies for verification of safety-critical software
DO-178C Guidance: Introduction to RTCA DO-178 certification
MATLAB® Simulink® MCDC coverage and WCET analysis
Code coverage for Ada, C and C++
AMC 20-193
DO-178C Multicore In-person Training (Huntsville)
HISC 2023
NXP's MCFA 2023
DO-178C Multicore In-person Training (Toulouse)
To ensure that software developed for safety-critical systems is fit for purpose, every part of the development process needs to be evaluated. One critical element is the compiler, used to convert human-readable source code into object code.
Compilers for the Ada programming language are already subject to a compiler conformity assessment, which shows that a given compiler correctly implements the Ada language specification. However, this assessment does not consider the suitability of the generated code for deployment to safety-related applications.
Summary
The challenge
- Outsource the compiler validation task, to reduce costs and effort from the systems integrator, while maintaining an equivalent level of rigour in the results.
The solution
- The compiler verification was outsourced to Rapita Systems, who completed the work on time and on budget.
The benefits
- A new compiler is now available to be deployed on any projects that need it, without additional validation costs.
- A number of dangerous and questionable issues have been identified in the compiler, which can now be avoided through guidance on using the compiler.
The challenge
One frequently adopted approach to demonstrating the suitability of generated code is to manually review the inputs and outputs of the compiler wherever the compiler is used, in other words, to review the entire object code of the application.
An industry-leading avionics system integrator has adopted an alternative approach, which involves examining the output of the compiler over a large set of test cases, to ensure that the generated code does not use non-deterministic, or overly-complex features, which could be hazardous.
The benefit of this approach means, once validated, the same compiler can be deployed to multiple projects, without needing to perform a manual analysis on every project.
The level of compiler validation performed by the systems integrator provides the level of assurance required for safety-critical systems, but is both expensive and complex, and ties up good engineers for long periods of time.
The systems integrator decided to outsource their compiler verification activity to Rapita Systems to reduce costs and free up valuable engineering effort.
The solution
Rapita Systems, a software verification company based in York, was approached as a possible partner for outsourcing the compiler validation work.
As a spin-out of the Real-Time Systems group at the University of York, Rapita had familiarity with the original study which led to the compiler validation work, with the Ada programming language and with the processes surrounding tool qualification.
To perform the work, Rapita adopted the test cases and processes used by the systems integrator in their previous validation of a compiler. The test cases were arranged in batches of roughly descending risk.
Each test case underwent a standard process:
- Porting. The capabilities of the new compiler meant that in some situations, the extensive test suite required porting, in order to exercise the compiler properly, for example to avoid compiler optimizations. In these cases, the test code was modified.
- The test cases were compiled using a local (to Rapita Systems) version of the compiler. Initially, the outputs of the locally-generated tests were compared against tests compiled at the system integrator’s premises, to ensure the correctness of the compiler’s configuration.
- The compiled test cases were analysed by a team of engineers considering a number of specific classes of phenomena, initially defined by the system integrator and enhanced by Rapita Systems.
The benefits
The outsourcing project has been successful: the compiler validation work was completed to time, to budget, and to the satisfaction of the system integrator’s tools group.
As a consequence of this work, the systems integrator is now using the new compiler on a number of safety-critical projects within a larger program, without the per-use validation overhead typically encountered.
Within the compiler validation activity, Rapita’s team identified a number of issues categorised as either “dangerous” or “questionable”, for which the system integrator’s tools group were able to develop guidance that would avoid such issues.
Rapita have developed procedures that will enable them to repeat this compiler validation activity on future programs as needed.
Other case studies
